A vulnerability was found in nopCommerce 4.90.0. It has been classified as problematic. The affected element is an unknown function of the component Product Management. Performing manipulation of the argument Product Name/Short Description results in cross site scripting.
This vulnerability is known as CVE-2025-65592. Remote exploitation of the attack is possible. No exploit is available.